@shipstatic/types 2.2.1-beta.0 → 2.4.0-beta.0

package/dist/index.d.ts

@@ -258,6 +258,8 @@ export interface Account {
     readonly activated: number | null;
     /** Last 4 characters of the API key for identification, null when no key generated */
     readonly hint: string | null;
+    /** Unix timestamp (seconds) of the API key's last use, null when never used or no key generated */
+    readonly used: number | null;
     /** Grace period expiration (unix seconds), null if no grace period active */
     readonly grace: number | null;
 }
@@ -518,6 +520,14 @@ export interface PingResponse {
     /** Optional timestamp */
     timestamp?: number;
 }
+/**
+ * Where human identity is mounted on the API host. The API mounts Better
+ * Auth at this path (sign-in, sign-out, session reads, admin impersonation)
+ * and the web console's auth client posts to it — shared here so the two
+ * halves of the auth pair agree by construction, the same way both sides
+ * already share the credential prefixes below.
+ */
+export declare const AUTH_BASE_PATH = "/auth";
 /**
  * How a request (or recorded activity) was authorized.
  *

package/dist/index.js

@@ -455,10 +455,19 @@ export function hasUnbuiltMarker(filePath) {
 // =============================================================================
 // CREDENTIAL SHAPES
 // =============================================================================
-// The one address for credential vocabulary: how a request is authorized
-// (AuthMethod), the shapes that distinguish populations on the wire
-// (API_KEY, DEPLOY_TOKEN, CALLER), the single dispatch over them (TokenKind,
-// classifyToken), and the delegated-access scopes (OAuthScope).
+// The one address for credential vocabulary: where human identity lives
+// (AUTH_BASE_PATH), how a request is authorized (AuthMethod), the shapes
+// that distinguish populations on the wire (API_KEY, DEPLOY_TOKEN, CALLER),
+// the single dispatch over them (TokenKind, classifyToken), and the
+// delegated-access scopes (OAuthScope).
+/**
+ * Where human identity is mounted on the API host. The API mounts Better
+ * Auth at this path (sign-in, sign-out, session reads, admin impersonation)
+ * and the web console's auth client posts to it — shared here so the two
+ * halves of the auth pair agree by construction, the same way both sides
+ * already share the credential prefixes below.
+ */
+export const AUTH_BASE_PATH = '/auth';
 /**
  * How a request (or recorded activity) was authorized.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipstatic/types",
-  "version": "2.2.1-beta.0",
+  "version": "2.4.0-beta.0",
   "description": "Shared types for ShipStatic platform",
   "type": "module",
   "main": "./dist/index.js",

package/src/index.ts

@@ -295,6 +295,8 @@ export interface Account {
   readonly activated: number | null;
   /** Last 4 characters of the API key for identification, null when no key generated */
   readonly hint: string | null;
+  /** Unix timestamp (seconds) of the API key's last use, null when never used or no key generated */
+  readonly used: number | null;
   /** Grace period expiration (unix seconds), null if no grace period active */
   readonly grace: number | null;
 }
@@ -834,10 +836,20 @@ export interface PingResponse {
 // =============================================================================
 // CREDENTIAL SHAPES
 // =============================================================================
-// The one address for credential vocabulary: how a request is authorized
-// (AuthMethod), the shapes that distinguish populations on the wire
-// (API_KEY, DEPLOY_TOKEN, CALLER), the single dispatch over them (TokenKind,
-// classifyToken), and the delegated-access scopes (OAuthScope).
+// The one address for credential vocabulary: where human identity lives
+// (AUTH_BASE_PATH), how a request is authorized (AuthMethod), the shapes
+// that distinguish populations on the wire (API_KEY, DEPLOY_TOKEN, CALLER),
+// the single dispatch over them (TokenKind, classifyToken), and the
+// delegated-access scopes (OAuthScope).
+
+/**
+ * Where human identity is mounted on the API host. The API mounts Better
+ * Auth at this path (sign-in, sign-out, session reads, admin impersonation)
+ * and the web console's auth client posts to it — shared here so the two
+ * halves of the auth pair agree by construction, the same way both sides
+ * already share the credential prefixes below.
+ */
+export const AUTH_BASE_PATH = '/auth';
 
 /**
  * How a request (or recorded activity) was authorized.